Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/da3a14cdaefc79c2ebda5ec1a573d129b7c9422d.roa
File:                     da3a14cdaefc79c2ebda5ec1a573d129b7c9422d.roa (raw, json)
Hash identifier:          ZTStwq4YurXEmx8EmUHdRqD++555CFSh9ipdh5uXH/4=
Subject key identifier:   70:CF:B7:B3:62:F3:0D:DC:CB:AD:57:89:F0:95:1B:F2:DB:94:0C:3A
Certificate issuer:       /CN=05ae69d2f111c794165a01a865fe187b8831227d
Certificate serial:       206895
Authority key identifier: 82:14:5E:DA:B6:58:1E:73:E4:BD:54:60:09:3E:CE:C9:76:0B:C4:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05ae69d2f111c794165a01a865fe187b8831227d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/da3a14cdaefc79c2ebda5ec1a573d129b7c9422d.roa
Signing time:             Fri 24 Mar 2023 08:30:26 +0000
ROA not before:           Thu 23 Mar 2023 08:30:25 +0000
ROA not after:            Sat 22 Mar 2025 08:30:25 +0000
asID:                     27841
IP address blocks:        2800:68:41::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2123925 (0x206895)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ae69d2f111c794165a01a865fe187b8831227d
        Validity
            Not Before: Mar 23 08:30:25 2023 GMT
            Not After : Mar 22 08:30:25 2025 GMT
        Subject: CN=da3a14cdaefc79c2ebda5ec1a573d129b7c9422d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bd:50:d2:9b:ea:e3:92:ae:f9:35:78:2a:81:
                    72:71:7d:fb:66:48:01:f6:d3:d8:08:13:93:9c:a6:
                    b8:61:30:37:9c:f0:5c:ec:c0:8c:c4:3a:7a:9e:a5:
                    8a:6c:15:8f:29:7c:61:ed:f5:93:b7:af:b0:31:d6:
                    ac:fc:05:37:61:50:1b:8a:1c:c6:71:eb:80:c1:7a:
                    ba:72:6b:0d:fb:9e:06:c5:f8:4f:42:0d:88:a7:c8:
                    d0:82:83:a4:a4:10:d6:7b:01:b3:aa:cc:59:ee:fd:
                    c9:5c:88:b4:aa:c9:cb:17:c6:82:f1:8d:9f:d2:ef:
                    a0:0d:28:32:7c:2a:d1:12:5c:00:99:c2:65:8f:5f:
                    9b:d2:a1:e6:5e:bd:0f:7a:ba:fc:bb:c9:e6:94:79:
                    e4:27:fd:6b:01:55:f4:66:a4:e9:5e:ca:18:4b:53:
                    35:26:ae:ab:f0:fa:fb:6e:a9:b0:22:3a:a7:b1:d2:
                    f0:9d:1e:0c:ad:94:02:9a:d8:f7:55:3b:b8:bd:33:
                    3f:ac:b7:2d:13:c9:8a:b0:1a:e7:87:c1:73:7b:cb:
                    1a:4d:c4:1a:a9:08:82:8b:b9:8b:d5:78:7e:d3:08:
                    21:6a:63:6f:81:77:36:23:47:08:4a:18:4e:c7:44:
                    f1:1f:0f:32:6d:0b:a0:32:2c:f5:5a:13:43:83:a9:
                    57:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:CF:B7:B3:62:F3:0D:DC:CB:AD:57:89:F0:95:1B:F2:DB:94:0C:3A
            X509v3 Authority Key Identifier:
                keyid:82:14:5E:DA:B6:58:1E:73:E4:BD:54:60:09:3E:CE:C9:76:0B:C4:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05ae69d2f111c794165a01a865fe187b8831227d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/da3a14cdaefc79c2ebda5ec1a573d129b7c9422d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/05ae69d2f111c794165a01a865fe187b8831227d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:68:41::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:a6:8e:48:63:a3:88:4d:cb:60:ae:6e:02:bd:0b:b5:ce:5a:
         8f:ec:78:d9:a0:3a:d0:d1:97:c1:1d:8d:a0:85:0d:ff:de:40:
         54:ed:95:64:e2:2d:17:13:86:65:c1:fb:04:0c:f9:c5:fd:84:
         c8:ef:47:d3:65:85:8d:d8:16:43:93:bc:31:e7:70:8f:0d:20:
         60:71:4b:8d:32:d4:89:99:d1:1c:76:89:1a:2c:f6:b3:8f:55:
         3d:2c:6c:b0:fb:09:a1:15:a3:90:05:4a:8c:9d:9e:15:04:6c:
         97:18:09:4b:8a:88:ce:74:93:34:29:44:54:d9:4c:26:a3:01:
         10:43:73:0c:df:84:fc:bc:17:e6:e3:e1:4f:27:dc:34:5b:16:
         62:42:5a:c6:04:ce:8a:0e:40:e5:32:d6:98:74:c4:57:51:13:
         7b:8e:a6:74:fa:e2:c0:58:a2:2e:20:62:82:bb:cc:3b:bb:58:
         31:dd:e3:fe:b9:d4:2b:1b:0a:33:f6:2b:9b:bc:2a:6c:27:6d:
         6e:8f:86:22:86:57:8d:d1:10:87:80:9e:cf:87:77:6a:a4:f8:
         1f:ea:43:1e:a4:b2:7f:fd:5f:63:84:e4:0d:2d:35:2b:54:42:
         e4:47:aa:db:f4:88:43:41:30:13:7d:64:99:1d:42:90:b5:2b:
         15:e2:ea:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----